Verizon’s data breach investigations report corroborates this observation. The report noted that only 36% of organizations in 2024 paid ransom, up from half previously, and median payouts fell from $150,000 to $115,000. Similarly, insurer At-Bay saw 19% more ransomware incidents and a 13% increase in their severity, but also reported fewer payouts.